I did a little reading up on this since Jamie posted, and it appears that IE8 up utilizes X-XSS-Protection directive as well. I believe, however, to set the directive to 0 it will have to be server side, such as a setting in the user.config seeing how everywhere else they were talking about setting it with PHP.